Last updated: September 2026
How Zinveo collects, uses, and protects the personal data of visitors to this website, under the EU General Data Protection Regulation (GDPR) and French data protection law.
This website (zinveo.com, the "Site") is operated by Zinveo("Zinveo," "we," "us," or "our"), a company registered in France under SIRET 947 483 566, with its registered office at 13 Avenue Léon Blum, Décines-Charpieu, 69150, France. Zinveo acts as the data controller for the personal data described in this policy, within the meaning of Article 4(7) GDPR, meaning we determine the purposes and means of that processing.
For any question about this Privacy Policy or about how we handle your personal data, you can reach us at contact@zinveo.com or by phone at +33 7 69 10 46 42. We aim to acknowledge privacy-related inquiries within 5 business days and to substantively respond within the one-month period required by Article 12(3) GDPR.
Zinveo has not appointed a Data Protection Officer, as none is required under the conditions set out in Article 37 GDPR given the nature and scale of our processing activities. Data protection questions and requests should instead be directed to the contact details above, which are handled directly by our team.
This policy covers the personal data we collect through this marketing website, including the forms described below and general browsing activity. It does not cover any separate product, application, or client-facing platform Zinveo may operate under a distinct engagement, those are governed by their own terms and agreed separately with each client, nor does it cover the practices of any third-party website you may reach through a link on this Site.
We collect personal data you choose to provide directly to us, through two forms currently active on this Site, and the categories each one collects:
| Form | Data collected | Purpose |
|---|---|---|
| Contact Our Team (/contact) | First name, last name, company name, business email, and your free-text message. | To respond to your inquiry and evaluate a potential engagement. |
| Job Application (/careers/[role]/apply) | First name, last name, email, phone number, postal address, education history, work experience, an optional response to "why this role," and your CV/résumé file (PDF or Word document). | To evaluate your candidacy for the specific role applied to. |
We also automatically collect limited technical data through standard web server and hosting logs (such as IP address, browser type and version, device type, referring page, and pages visited) necessary for the security and functioning of the Site. See our Cookies Policy for detail on the one cookie this Site sets.
We do not currently operate an online account system, and this website does not process payment card data. We do not knowingly request any special category of personal data within the meaning of Article 9 GDPR (such as health, religious, trade union membership, or biometric data) through either form, and we ask that you avoid including such information in any free-text field, including your CV, beyond what is customary and necessary for a job application (for example, standard education and employment history).
Article 13(1)(c) GDPR requires us to state the specific legal basis for each processing purpose, rather than a general statement. The table below maps each purpose to its basis:
| Purpose | Legal basis |
|---|---|
| Responding to a Contact form inquiry | Art. 6(1)(b) — steps at your request prior to a possible contract, or Art. 6(1)(f) legitimate interest where no contract is contemplated. |
| Evaluating a job application | Art. 6(1)(b) — steps taken at your request prior to entering an employment or internship contract. |
| Website security and fraud prevention | Art. 6(1)(f) — our legitimate interest in keeping the Site secure and functioning, balanced against your rights as described below. |
| Compliance with accounting, tax, or labor-law record-keeping | Art. 6(1)(c) — compliance with a legal obligation under French law. |
Where we rely on legitimate interest under Article 6(1)(f), we have carried out a balancing assessment weighing that interest against your own rights and freedoms, and concluded it is not overridden by them; a copy of that assessment is available on request.
This website sets exactly one cookie, used to remember your selected language across visits. It is not used for advertising, analytics, or cross-site tracking. Full detail, including the cookie's name, provider, and duration, is available in our Cookies Policy.
We do not sell your personal data. We share it only with the service providers strictly necessary to operate this Site and respond to your requests, each acting under a written agreement incorporating the safeguards required by Article 28 GDPR:
| Sub-processor | Role | Location |
|---|---|---|
| Resend, Inc. | Transactional email delivery for Contact and Job Application form submissions. | United States |
| Hosting provider | Website hosting and content delivery. | To be confirmed once the Site's production hosting is finalized; this section will be updated accordingly. |
We may also disclose personal data where required by law, in response to a valid legal process, or to protect our legal rights, the rights of our clients, or the safety of others. In the event of a corporate transaction, such as a merger or acquisition, personal data may be transferred as part of that transaction, subject to appropriate confidentiality protections.
Zinveo is based in France, and our team also operates from Hangzhou, Kuala Lumpur, Ningbo, Shanghai, and Singapore. Where personal data is transferred outside the European Economic Area, including to any of these locations or to a sub-processor established outside the EEA such as Resend (United States), we rely on the European Commission's Standard Contractual Clauses (2021/914) as the transfer mechanism, together with the supplementary measures such transfers require under the "Schrems II" line of case law, or another lawful transfer mechanism recognized under Chapter V GDPR where applicable. A copy of the relevant safeguards is available on request.
We retain personal data only for as long as necessary for the purpose it was collected:
| Data category | Retention period |
|---|---|
| Contact form inquiries | Duration of the resulting correspondence or engagement, plus 3 years from last contact if no engagement follows, to allow for follow-up. |
| Job applications (including CV) | 2 years from submission if you are not hired, so we may consider you for future roles, unless you ask us to delete it sooner. Deleted immediately on request. |
| Technical / server log data | Up to 12 months, for security monitoring purposes. |
We take reasonable technical and organizational measures to protect the personal data we hold against unauthorized access, loss, or misuse, including encryption of data in transit, access controls limiting who within our team can view submitted data, and the use of reputable third-party infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within the 72-hour period required by Article 33 GDPR, and will notify you directly without undue delay where the breach is likely to result in a high risk to your rights and freedoms, as required by Article 34 GDPR.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR. Any structural risk analysis Zinveo performs is carried out under separate client engagements, on deal materials a client provides directly, and is unrelated to the personal data collected through this marketing website.
This website is directed at institutional professionals and job applicants of working age, and is not intended for use by children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
Under the GDPR (Articles 15–21) and French data protection law, you have the right to:
To exercise any of these rights, contact us at contact@zinveo.com. We may ask you to verify your identity before acting on a request, and we will respond within one month of a valid request, extendable by a further two months for complex requests as permitted under Article 12(3) GDPR, in which case we will explain the reason for the delay.
You also have the right to lodge a complaint with a data protection supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or via cnil.fr. If you are located in another EEA country, you may instead contact your local supervisory authority. We would, however, appreciate the opportunity to address your concern directly before you do so.
We may update this Privacy Policy to reflect changes in our practices, the data we collect, or for legal or regulatory reasons. The "Last updated" date at the top of this page indicates when it was last revised. Material changes affecting how we use previously collected data will be communicated to affected individuals directly where feasible, in addition to updating this page.
For any question about this Privacy Policy or to exercise your data protection rights, please contact:
Zinveo
13 Avenue Léon Blum, Décines-Charpieu, 69150, France
contact@zinveo.com
+33 7 69 10 46 42
ZINVEO ne décide pas. ZINVEO expose l'asymétrie structurelle. La décision finale revient
au comité d'investissement.
Recherchez dans notre couverture, ou demandez un accès direct au moteur de risque structurel de ZINVEO.
